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Digital signal transmitting methods, digital signal receiving apparatus, and recording media 



(57) A digital signal transmitting method, a digital 
signal receiving apparatus (40), and a recording medi- 
um (101) ensure the security of fee-charged software 
information. When an image providing predetermined 
services is transmitted, a band-compression coded dig- 



ital video signal is subjected to first-encryption process- 
ing and then the digital signal is subjected to further en- 
cryption processing and transmitted. Therefore, double 
security can be added to the video signal and a digital 
signal transmitting method of more firmly ensured secu- 
rity can be realized. 
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Description 

[0001] This invention relates to digital signal receiving 
apparatus, and is applicable, for example, to a digital 
signal transmitting system which provides fee-charged 
software information to contract users. 
[0002] In a previously proposed digital signal trans- 
mitting system using satellites or cables, as shown in 
Fig. 1, a program source PS, input to a digital signal 
transmitting apparatus, i.e., a broadcasting station 1, is 
band-compression coded with a moving picture image 
coding experts group (MPEG) method by means of an 
MPEG encoder 2 and is converted to packet transmis- 
sion data by means of a packet generation section 3. 
[0003] The packetized transmission data is multi- 
plexed by a multiplexer 4, then the transmission data is 
scrambled for security by an encryption processing sec- 
tion 5, and finally keys (ciphers) are put over the scram- 
bled data many times so that the scrambling cannot be 
descrambled easily. The encrypted transmission data is 
error corrected by a forward error correction (FEC) sec- 
tion 6 and modulated by a modulator 7. The modulated 
data is then sent through a digital satellite 8 directly to 
a digital signal receiving apparatus installed in a contract 
user's household, i.e., a terminal 10 (Fig. 2), or sent 
through the digital satellite 8 to a signal distributing sta- 
tion 9 (Fig. 2) which is called a head end. The data, 
transmitted to the signal distributing station 9, is sent to 
the terminal 10 via cable. 

[0004] Now, as shown in Fig. 2, in the terminal 10, 
when the transmission data is directly sent via the sat- 
ellite 8, the data is received by an antenna 11 and sent 
to a Iront end section 12. When the transmission data 
is sent from the signal distributing station 9 via the cable, 
it is inputted directly to the front end section 12. A user 
contracting with the broadcasting station 1 accesses a 
key authorized to each user to the terminal 10, with re- 
spect to the transmission data sent directly from the sat- 
ellite 8 or from the satellite 8 via the signal distributing 
station 9, so that the user is authorized as a contract 
user and bill processing is performed, and at the same 
time, the user can appreciate desired software informa- 
tion. 

[0005] That is, in the terminal 1 0, the transmission da- 
ta is processed by the front end section 12 comprising 
a tuner, a demodulator, and an error corrector, and the 
processed data is input to a data fetch section 1 3. In the 
data fetch section 1 3, the multiplexed data is demulti- 
plexed by the demultiplexer 14 so that the data is sep- 
arated into an video signal, an audio signal, and data 
other than these signals. In a decryption section 15, ci- 
phers are decrypted while performing bill processing. In 
a packet separation section 16, the decrypted data is 
packet separated. Finally, the compression of the data 
is expanded by an MPEG decoder 1 7, and the video and 
audio signals, which are digital-to-analog converted to 
analog signals, are output to television. 
[0006] Incidentally, in the digital signal transmission 



system, when fee-charged software information such as 
video on demand or near video on demand is transmit- 
ted, a digital storage 18 such as tape media or disk me- 
dia is incorporated into or connected to the terminal 10 

s to meet the convenience of users and to effectively uti- 
lize a digital transmission path. In such a case, large 
amounts of software data have been downloaded to the 
storage 18 by making use of an unoccupied time band 
and an unoccupied transmission path, and when the-us- 

10 er looks at the software information near at hand, the 
user accesses it with an ID card (for example, smart 
card) 19 to perform bill processing, and reproduction 
limitation is lifted. 

[0007] More specifically, if the user accesses a central 

is processing unit (CPU) 20 by means of the smart card 
19, the CPU 20 performs an inquiry of registration to an 
authorization center 22 (Fig. 1) through a modem 21. 
The authorization center 22 confirms registration by 
means of a conditional access 23. If registration is con- 

20 firmed, the authorization center 22 performs bill 
processing and also performs notification of confirma- 
tion to the CPU 20 through the modem 21 . 
[0008] The CPU 20 instructs decryption of key to a 
local conditional access 24 by this notification, and the 

25 local conditional access 24 decrypts a cipher which has 
been put over the data recorded on the storage 18. 
Hence, the reproduction limitation is lifted, and the pack- 
et of the data recorded on the storage 1 8 is separated 
by the packet separation section 16. The compression 

30 of the packet-separated data is decompressed (expand- 
ed) by the MPEG decoder 17 and then the expanded 
data is digital-to-analog converted to be output to tele- 
vision as the analog signal and audio signal A/V. 
[0009] However, if, in the security system in a current 

35 broadcasting form, software information has been 
downloaded to the storage 18, as described above, to 
try to realize a system where this software can be ap- 
preciated when user wants to see it, then the following 
problems will arise. 

40 [0010] More specifically, in the current digital signal 
transmitting system, when a cipher is decrypted by the 
decrypting section 1 5 and then software information is 
downloaded to the storage 18, as shown by point A in 
Fig. 3, fee-charged software cannot be downloaded to 

45 the storage 18 by decrypting the cipher without billing, 
because decrypting a cipher is, i.e., billing. Now, if only 
billing information is made free, all ciphers of data are 
decrypted, and downloaded to the storage 18, then a 
piece of software information is passed as it is and out- 

50 put from the terminal 10. 

[0011] Also, in a case where the storage 18 is not in- 
corporated into the terminal 10 but is connected to the 
terminal 10 and switching means is not provided be- 
tween the decryption section 1 5 and the packet separa- 

55 tion section 16, if ciphers are all decrypted and down- 
loaded to the storage 18, then the decrypted data are 
all sent and there is the possibility that they can been 
seen for free at point C of Fig. 3 by persons other than 
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contract users. 

[0012] To solve these problems, data can be down- 
loaded to the storage 18 before ciphers are decrypted; 
i.e., after multiplex is demultiplexed by the demultiplexer 
1 4 (point B of Fig. 3). If, however, data are downloaded s 
to the storage 18 after multiplex is demultiplexed by the 
demultiplexer 14, there is the problem that intra-coded 
(I) pictures can not be pulled out and can not be repro- 
duced at variable speed, because data remain encrypt- 
ed 10 
[0013] Also, rn broadcasting systems where data are 
encrypted, keys are changed annually or biennially to 
ensure security Therefore, when a key is changed after 
software information is downloaded to the storage 18, 
there is the problem that ciphers cannot be decrypted is 
and therefore the downloaded software information can- 
not be seen. 

[0014] According to a first aspect of the invention 
there is provided a digital signal transmitting method 
wherein at least a band-compression coded digital video 20 
signal is given encryption processing and transmitted, 
in which when an image providing predetermined serv- 
ices is transmitted, the band-compression coded digital 
signal is given first-encryption processing and then the 
first-encryption processed digital signal is further given 2s 
the encryption processing and transmitted. 
[001 5] According to a preferred form of implementing 
the method according to the first aspect of the invention, 
the band-compression coded and encryption processed 
digital signal is mixed with the digital signal where the so 
band-compression encoding has been completed within 
a predetermined image unit, and the mixed signal is 
transmitted. 

[001 6] According to a second aspect of the invention 
there is provided a digital signal receiving apparatus 35 
(40) for receiving at least a band-compression coded 
digital video signal over which a first cipher is put and 
then a second cipher is put and which is transmitted by 
a broadcasting station, the apparatus comprising sec- 1 
ond decrypting means (1 5, 1 9) for decrypting the sec- 40 
ond cipher put over the digital signal; recording/repro- 
ducing means (73, 74, 75, 76, 77) for recording the dig- 
ital signal, where the second cipher was decrypted, on 
a recording medium, and also for reproducing the digital 
signal recorded on the recording medium: and first de- 45 
crypting means (46, 91 ) for decrypting the first cipher of 
a reproduction signal that is reproduced from the record- 
ing medium. 

[001 7] Furthermore, according to a third aspect of the 
invention, there is provided a recording medium (101) so 
wherein at least a band-compression coded digital video 
signal has been encrypted and recorded. 
[0018] A preferred form of implementation of the in- 
vention provides a digital signal transmitting method, a 
digital signal receiving apparatus, and a recording me- ss 
dium which are capable of ensuring security when fee- 
charged software information is transmitted. 
[0019] The preferred form of implementation is de- 



scribed in detail below with reference to the accompa- 
nying drawings. First, however, it will be described in 
outline. 

[0020] When an image providing predetermined serv- 
ices is transmitted, a band-compression coded digital 
video signal is given first-encryption processing and 
then the digital signal is further given encryption 
processing and transmitted. Therefore, double security 
can be added to the video signal so that a digital signal 
transmitting method where its security is more firmly en- 
sured can be realized. 

[0021] Further, at least a band-compression coded 
and first-encryption processed digital video signal are 
mixed with the digital signal where the band-compres- 
sion encoding has been completed within a predeter- 
mined image unit in a broadcasting station (30). There- 
fore, variable-speed reproduction image can be viewed 
without performing variable-speed reproduction 
processing at a terminal (40). 

[0022] When a first cipher and a second cipher are 
put over a digital signal where at least an video signal 
was the band-compression coded, and the digital signal 
which is transmitted by the broadcasting station (30) is 
received, the second cipher of the received digital signal 
is decrypted by the second decrypting means (15, 19) 
and the second decrypted digital signal is recorded on 
a recording medium by means of recording/reproducing 
means (73, 74, 75, 77). At the time of reproduction, the 
first cipher of the reproduction signal which is repro- 
duced from the recording medium is decrypted by the 
first decrypting means (46, 91). Hence, a digital signal 
receiving apparatus (40) where security is more firmly 
ensured can be realized. 

[0023] Furthermore, there is provided a recording me- 
dium (101) wherein at least a band-compression coded 
digital video signal has been encrypted and recorded; 
With this, contract users are able to cheaply obtain the 
recording medium (101) where a plurality of pieces of 
encrypted software information are recorded, and are 
able to construct a new software information supply sys- 
tem where only information that users desire to see is 
billed and enjoyed. 

[0024] The invention will now be further described, by 
way of illustrative and non-limiting example, with refer- 
ence to the accompanying drawings, in which like parts 
are designated by like reference numerals or charac- 
ters, and in which: 

Fig. 1 is a block diagram showing the structure of a 
previously proposed digital signal transmitting ap- 
paratus; 

Fig. 2 is a block diagram showing the structure of a 
previously proposed digital signal receiving appa- 
ratus; 

Fig. 3 is a block diagram explaining problems oc- 
curring when, in the previously proposed digital sig- 
nal receiving apparatus, software information is 
downloaded; 
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Fig. 4 is a block diagram showing the structure of a 
digital signal transmitting apparatus for use with an 
embodiment of the invention; 
Fig. 5 is a block diagram showing the structure of a 
digital signal receiving apparatus according to an 
embodiment of the invention; 
Fig. 6 is a block diagram showing the detailed struc- 
ture of a sending section of the digital signal trans- 
mitting apparatus for use with the embodiment of 
the invention; 

Fig. 7 is a block diagram showing the detailed struc- 
ture of a software supply section of the digital signal 
transmitting apparatus for use with the embodiment 
of the invention; 

Fig. 8 is a block diagram showing the detailed struc- 
ture of a receiving section of the digital signal re- 
ceiving apparatus according to the embodiment of 
the invention; 

Fig. 9 is a block diagram showing the detailed struc- 
ture of a recording/reproducing section of the digital 
signal receiving apparatus according to the embod- 
iment of the invention; 

Fig. 1 0 is a block diagram showing the schematic 
structure of a digital signal transmitting system of 
the embodiment; and 

Fig. 1 1 is a block diagram explaining a software sup- 
ply system of a package system. 

[0025] Preferred embodiments of this invention will 
now be described with reference to the accompanying 
drawings: 

(1) Structure of Digital Signal Transmitting Appa- 
ratus and Digital Signal Receiving Apparatus 
[0026] In Fig. 4, where the same reference numerals 
are applied to parts corresponding with Fig. 1 , reference 
numeral 30 denotes a digital signal transmitting appa- 
ratus for use with an embodiment of the invention. In the 
digital signal transmitting apparatus 30, i.e., a broad- 
casting station, when predetermined services, for exam- 
ple, fee-charged software data are transmitted, twofold 
security is ensured by putting a cipher of a storage sys- 
tem over software data and further putting a cipher of a 
broadcasting system over the software data. 
[0027] The digital sjgnal transmitting apparatus 30 is 
constituted by a digital signal sending section 31 and a 
software supply section 32. In the digital signal transmit- 
ting apparatus 30, when fee charged software informa- 
tion, for example, image software, music software, elec- 
tronic program list, shopping information, game soft- 
ware, or education information is requested by users, 
as shown in Fig. 4, the software information as a pro- 
gram source PS 2 is input to the software supply section 
32. 

[0028] I n the software supply section 32, the software 
data PS2 comprising a digital signal is band-compres- 
sion coded by means of an MPEG encoder 33. The 
band-compression coded digital signal is input to a 
packet generation section 34 and a trick play processing 



section 35. In the trick play processing section 35, var- 
iable-speed reproduction processing, i.e., processing 
for extracting an intra-coded (I) picture is performed for 
the video data. The extracted I picture is output to a mul- 
5 tiplexer 36. Note that a technique for variable-speed re- 
producing an image which has been band-compression 
coded by an MPEG method is disclosed in Japanese 
Patent Application No. 287702/1993. 
[0029] In the packet generation section 34, the input 
10 digital signal is packetized to video data, audio data, and 
other data. These packetized data are multiplexed by a 
multiplexer 36. In the multiplexer 36, an I picture is bur- 
ied in the video data. A cipher of a storage system is put 
over the multiplexed digital signal by an encryption 
15 processing section 37, and the encrypted signal is sent 
to a multiplexer 4 of a rear sending section 31 . 
[0030] In the multiplexer 4, digital signals over which 
the ciphers of storage system were put are multiplexed. 
In an encryption processing section 5, a cipher of a 
20 broadcasting system is put over this multiplexed digital 
signal. Therefore, a cipher of a storage system and a 
cipher of a broadcasting system are put over the digital 
signal sent from the digital signal transmitting apparatus 
30 in duplicate. In the sending section 31 , key data that 
2s are added to programs are all common and broadcast- 
ing billing data is charge free. ^ 
[0031] This double security added digital signal is sent 
to a terminal installed in a household, i.e. , a digital signal 
receiving apparatus 40 directly from a satellite 8 or by 
30 way of a signal distributing station 9 from the satellite 8, 
as shown in Fig. 5, where the same reference numerals 
are applied to corresponding parts with Fig. 2. Inthe dig- 
ital signal receiving apparatus 40, the cipher of the 
broadcasting system, put over the transmitted digital 
35 signal, is decrypted by accessing a smart card 19 ; and 
the digital signal can be downloaded to a digital storage 
41 . That is, the cipher of the broadcasting system of the 
transmitted digital signal is decrypted by the decrypting 
section 1 5 and then the digital signal is recorded on the 
40 digital storage 41 . 

[0032] In this case, the digital signal which is down- 
loaded to the digital storage 41 is recorded in the state 
where only the cipher of the storage system has been 
put over and also recorded in the state where variable- 
46 speed reproduction processing has been performed. 
Therefore, even if the key of the broadcasting system, 
added by the sending section 31, were changed, there 
would be no influence. Also, no image is viewed free of 
cost because the cipher of the storage system has been 
so put over at point C of Fig. 5. 

[0033] When a user desires to see the software infor- 
mation PS 2 downloaded to the storage 41, a CPU 42 
performs an inquiry of registration to an authorization 
center 44 (Fig. 4) for software information through a mo- 
55 dem 43, by inputting an ID number registered independ- 
ently of the broadcasting system (for example, on the 
screen of a personal computer, put ah ID number). The 
CPU 42 usually performs an inquiry of registration to a 
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broadcasting-system authorization center 22 for the 
contract program PS 1 and performs an inquiry of regis- 
tration to the software-system authorization center 44 
for the software information PS 2 . That is, the CPU 42 
constructs two independent billing systems, a billing 
system for a broadcasting system and a billing system 
for a software system, by controlling the share of the 
modem 43. 

[0034] The authorization center 44 sends the ID 
number to the conditional access 45 (Fig. 4) of the soft- 
ware supply section 32 and confirms registration. If the 
authorization center 44 confirms registration, then bill 
processing is performed and the CPU 42 instructs a lo- 
cal conditional access 46 to decrypt a cipher. The local 
conditional access 46 has a function of decrypting the 
cipher of the software system. Hence, the reproduction 
limitation of the storage 41 is lifted and the cipher is de- 
crypted, so that the user is able to see software infor- 
mation by the same manipulation as a normal video tape 
recorder (VTR). 



(2) Structure of Digital Signal Transmitting Apparatus 
according to an Embodiment 

[0035] The detailed constructions of a sending sec- 
tion 31 and a software supply section 32 of a digital sig- 
nal transmitting apparatus for use with an embodiment 
of the present invention are shown in Figs. 6 and 7, re- 
spectively. In this digital signal transmitting apparatus 
30, when a normal contract program PS, is supplied, 
the program source PS, is input directly to the sending 
section 31, and when fee-charged software information 
PS 2 is supplied, the fee-charged software information 
PS 2 -is supplied to the sending section 31 through the 
software supply section 32. 

[0036] For the appreciation of the program PS, the 
video signal and the audio signal of a program, which is 
supplied, for example, from a digital VTR 47, are band- 
compression coded by means of MPEG encoders 2A 
and 2B and then are packetized for each video data and 
for each audio data by means of packet generation sec- 
tions 3A and 3B. The packetized video data and audio 
data are sent to.a multiplexer 4 via a data bus 48. At the 
.same time as this, for examples personal computer 49 
(hereinafter referred toas a "PC") sends data other than 
video data and audio data toa packet generation section 
3C through a data interface (jdata l/F) 50 to be pack- 
etized. The packetized data from the packet generation 
section 3C is then sent through the data bus 48 to the 
multiplexer 4. 

[0037] Also, a conditional access 23 sends key data 
through a data l/F 51 to a packet generation section 3D 
to packetize it, and the packet key data from the packet 
generation section 3D is sent through the data bus 48 
to the multiplexer 4. The conditional access 23 further 
sends key information for encrypting software data to 
an encryption processing section 5. In the multiplexer 4 
the video data, the audio data, and other data are mul- 



tiplexed. The encryption processing section 5 puts a ci- 
pher over this multiplexed data, based on the key infor- 
mation input from the conditional access 23. The en- 
crypted data is error corrected by a FEC section 6 The 
5 error-corrected data is modulated by a modulator 7 and 
then transmitted to a satellite 8 via an up-converter 52 
[0038] When, on the other hand, fee^harged soft- 
ware information PSg is transmitted, the video signal 
and the audio signal of the software information PS. 
10 which is output, for example, from a digital VTR 53 are 
band-compression coded by means of MPEG encoders 
33A and 33B, respectively. The band-compression cod- 
ed video signal is input to a packet generation section 
34A and a trick play processing section 35. The packet 
« generation section 34A packetizes the input video sig- 
nal^ The trick play processing section 35 extracts an I 
picture from the input video signal and then outputs the 
I picture to a multiplexer 36. 

[0039] The band-compression coded audio signal is 
20 , np ut to a packet generation section 34B, which pack- 
etizes the audio signal. Also, general data other than 
video data and audio data, input from the PC 54 is input 
through a data l/F 55 to a packet generation section 
34C. In addition, the conditional access 45 sends key 
25 data to a packet generation section 34D through a data 
l/F 56 and also sends key information for storage system 
to the encryption processing section 37. 
[0040] The packetized data from the packet genera- 
tion sections 34A to 34D are multiplexed by the mutti- 
30 piexer 36 through the data bus 57 and also the I picture 
is buried in video data. An encryption processing section 
37 encrypts the multiplexed data, based on the key in- 
formation input from the conditional access 45, and out- 
puts the encrypted data to the packet generation sect ion 
35 3E of the sending section 31 through a data l/F 58 (Fig. 
6). The packetized data from the packet generation sec- 
tion 3E is sent through the data bus 48 to the multiplexer 
4 to be multiplexed, and then sent to the encryption 
processing section 5. In the encryption processing sec- 
40 tion 5, a cipher of the broadcasting system is put over 
the multiplexed data. The encrypted data is processed 
by the FEC section 6, the modulator 7, and the up-con- 
verter 52. The thus processed data is transmitted to the 
terminal 40 directly from the satellite 8 or by way of the 
45 signal distributing station 9 from the satellite 8. 

(3) Structure of Digital Signal Receiving Apparatus 
according to an Embodiment 



so [0041] As shown in Figs. 8 and 9 where the same ref- 
erence numerals are applied to corresponding parts 
with Fig. 5, the digital signal receiving apparatus 40 ac- 
cording to an embodiment of the present invention is 
constituted by a receiving section 60 (Fig. 8) for receiv- 
es ing a digital signal which is sent by the digital signal 
transmitting apparatus 30 and a recording/reproducing 
section 61 (Fig. 9) for recording and reproducing the sig- 
nal received by the receiving section 60 on and from a 
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recording medium. In this embodiment, the receiving 
section 60 and the recording/reproducing section 61 are 
interconnected by way of digital interfaces (digital l/F) 
62 and 63. 

[0042] In the receiving section 60, the digital signal 5 
which is transmitted directly from the satellite 8 or by 
way of the signal distributing station 9 from the satellite 
8 is input to a tuner 12A as a compressed digital signal. 
The tuned digital signal is demodulated by-a demodula- 
tor 12B and error corrected by an FEC section 12C. The to 
error-corrected signal is then input to a decrypting block 
comprising a demultiplexer 1 4 and a decrypting section 
15. In the decrypting block, the cipher of the broadcast- 
ing system is decrypted with a private key which only a 
registered user can have. 

[0043] The general data where the cipher of the 
broadcasting system was decrypted and the video data 
where a plurality of program channels were time-divi- 
sion multiplexed at units of packet of predetermined byte 
length are sent to a packet separation section 1 6 or the 
recording/reproducing section 61. A path leading to the 
packet separation section 16 and a path leading to the 
recording/reproducing section 61 are switched by 
switching means (not shown). In this embodiment, the 
switching means has been switched to the recording/ 
reproducing section 61. The general data used herein 
includes text data, font data, video data, graphic data, 
and moving picture video data for administering a user's 
interface on a TV monitor. 

[0044] The general data is input through a data port 
to a CPU block 64 which-performs interactive process- 
ing. The CPU block 64 comprises a main CPU 42, an 
electrically erasable programmable read only memory 
(EEPROM) 65, a modem interface (modem l/F) 66, a 
modem 43, a video random access memory (VRAM) 67, 
a graphic processor unit (GPU) 68, a read only memory 
(ROM) 69, and a dynamic random access memory 
(DRAM) 70. In the case ol hard-disk incorporated sys- 
tems, general data is stored through a CPU bus in a hard 
disk once. The CPU 42 processes these general data 
in accordance with instructions externally manipulated 
by a controller, and necessary display data is output. 
[0045] On the other hand, the video data is input 
, through the digital l/F 62 and the digital l/F 63 to the 
recording/reproducing section 61 and then the video da- 
ta is packetized and separated by a packet separation 
section 71 . The packetized separated data is given time 
base corrector (TBC) processing and the format is con- 
verted by a format converting section 72. The format 
converted data is error corrected and modulated by way 
of a local conditional access 46. The modulated data is 
then recorded on the recording medium of a mechanical 
deck 74 by means of a record/reproduction processing 
section 73. Note that both of tapes and disks can be 
used as a recording medium. For example, there are 
digital VCRs, digital video disks (DVD), hard disks, and 
mini-floppy disks. 

[0046] If a user instructs reproduction, a command is 



input from the CPU 42 through the digital l/F 62 and the 
digital l/F 63 to a VCR controller 75 The VCR controller 
75, based on this command, drives the mechanical deck 
74 by a driver 76. Thereby, a search is made up to a 
desired absolute address on the recording medium and 
a tracking operation is performed by an automatic track- 
ing following (ATF) 77. As a result, data, recorded on 
the recording medium, is reproduced by the record/re- 
production processing section 73. Note that the abso- 
lute address may be added in advance to transmission 
data, or may be added within the digital signal receiving 
apparatus 40. 

[0047] "The reproduction signal, reproduced by the 
record/reproduction processing section 73, is demodu- 
lated and then the cipher of the storage system is de- 
crypted by the local conditional access 46. The decrypt- 
ed reproduction signal is error corrected and the format 
is converted by the format converting section 72. The 
format converted reproduction signal is packetized by 
Ihe packet generation section 78 and is sent through the 
digital l/F 63 and the digital l/F 62 to the packet separa- 
tion section 16, in which the packet is separated. For the 
packet separated reproduction signal, the compression 
of the audio signal and the compression of the video sig- 
nal are decompressed by an MPEG audio decoder 1 7 A 
and an MPEG image decoder 17B, respectively. 
[0048] The decompressed audio signal is converted 
to an analog signal by a digital-to-analog converter 
(DAC) 79 and is output The decompressed video signal 
is encoded by a national television system committee 
(NTSC) encoder 80. Also, general data on a user inter- 
face is input from the CPU block 64 to an NTSC encoder 
81 . The general data, encoded with the aforementioned 
encoder 81 , is added to the video signal which is output 
from the encoder 80, and the general data is output 
[0049] In a case where in the foregoing structure the 
software information PSg is transmitted to the digital sig- 
nal receiving apparatus 40, in the software supply sec- 
tion 31 : a cipher of a software system is put over the 
software information PS 2 and then in the sending sec- 
tion 32 a cipher of a broadcasting system is put over, 
and with this double security ensured, the software in- 
formation is transmitted to the digital signal receiving ap- 
paratus 40. In the digital signal receiving apparatus 40, 
the cipher of the broadcasting system is decrypted and 
then the software information PS 2 is recorded on the 
digital storage 41 . When a user sees the software infor- 
mation PSg recorded on the digital storage 41 , registra- 
tion is confirmed by the authorization center 44. If reg- 
istration is confirmed, the cipher of the software system 
-is-decrypted and the software information PS 2 can.be 
seen. 

[0050] According to the foregoing structure, the key 
data of the broadcasting system are rendered all com- 
mon and also the billing data by broadcasting is ren- 
dered free, and the software information PS 2 over which 
a cipher of the broadcasting system and a cipher of the 
software system are put in duplicate is transmitted when 
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the software information PS 2 is supplied to the digital 
signal receiving apparatus 40. In the digitahsignal re- 
ceiving apparatus 40, the cipher of the broadcasting 
system is decrypted and then the software information 
PS 2 is downloaded on the digital storage 41 . Therefore, 
security can be ensured because the cipher of the soft- 
ware system has been put over the software information 
PS 2 when downloading the software information PS 2 to 
the digital storage 41. 

[0051] Also, according to the above-mentioned struc- 
ture, the switching means, which switches the path lead- 
ing to the packet separation section 1 6 and the path 
leading to the recording/reproducing section 61 , is pro- 
vided, so that a digital signal transmitting system having 
both of the advantages of a video on demand and the 
advantages of a VTR can be provided to contract users. 
[0052] Also, according to the above-mentioned struc- 
ture, the software information PS 2 is given variable- 
speed reproduction processing in the software supply 
section 32 and then transmitted to the digital signal re- 
ceiving apparatus 40, so that contract users are able to 
reproduce the software information PS2 recorded on the 
storage 41 at variable speed. 

[0053] Also, according to the above-mentioned struc- 
ture, users are able to see, among a plurality of pieces 
of software information PS 2 downloaded, only desired 
software information at a desired time because a plural- 
ity of pieces of fee-charged software information PS 2 
can be downloaded to the storage 41 of the terminal 40 
by making use of an unoccupied time band of a trans- 
mission path and an unoccupied transmission path. In 
other words, each time software information PS 2 de- 
sired is selected, bill processing is performed and the 
reproduction limitation-of the storage 41 is lifted. This 
embodiment is also effective as a means for realizing 
the video on demand in a digital signal transmitting sys- 
tem which is not 1:1 as in the case of transmission by 
satellite. 

[0054] Also, according to the above-mentioned struc- 
ture, the switching between the access to the authori- 
zation center 22 managing the billing information on the 
normal contract programs PS 1 and the access to the au- 
thorization center 44 managing the billing information on 
the.software information PSa is controlled by way of the 
modem 43, so that two independent billing systems, a 
billing system for a broadcasting system and a billing 
system for a software system, can be constructed. 



(4) Structure of Digital Signal Transmitting System 

[0055] In Fig: 10 where the same reference numerals 
are applied to corresponding parts with Figs. 4 and 5, 
reference numeral 90 denotes the schematic construc- 
tion of a digital signal transmitting system for use with 
another embodiment of the present invention. In the dig- 
ital signal transmitting system 90, twofold security is en- 
sured when predetermined services, for example, fee- 
charged software information PS 2 is transmitted, by 



putting a cipher of the storage system over the software 
information PS 2 and further putting a cipher of, the 
broadcasting system over that software information 
PS 2 . Moreover, an encryption key Km, whch is used 
5 when the cipher of the storage system is put over, is en- 
crypted with a personal key Kp2 for software information 
use. 

[0056] When a user sees the program source PSj 
transmitted by the digital signal transmitting apparatus 
10 30, the user inserts the smart card 1 9 mailed from the 
broadcasting station 30 into the terminal 40 and inputs 
a registered ID number of broadcasting system, ID1. 
Hence, the CPU 42 performs an inquiry of registration 
to the authorization center 22 through the modem 43. If 
is the registration of that user is confirmed, a program 
source Es (Data) over which a cipher of the broadcast- 
ing system was put is sent from the broadcasting station, 
i.e., the digital signal transmitting apparatus 30. 
[0057] That is, in the broadcasting station 30, when 
20 the program source PS-, is transmitted to the digital sig- 
nal receiving apparatus 40, in the encryption processing 
section 5, a cipher of the broadcasting system is put over 
the program source PS 1 by means of an encryption key 
Ks. This encryption key Ks is encrypted with a work key 
25 Kw, and the work key Kw is encrypted with a personal 
key Kpl of broadcasting system given to each user. 
Therefore, the encryption processing section 5 multi- 
plexes the program source Es(Data) over which a cipher 
of the broadcasting system was put, and the encryption 
30 key E(Ks) and the work key E(Kw), and transmits the 
multiplexed data to the digital signal receiving apparatus 
40. 

[0058] The smart card 19 includes the personal key 
Kpl which was used when encrypting the encryption key 
35 Km. Therefore, in the terminal 40, the cipher of the en- 
crypted work key E(Kw) is decrypted by the personal 
key Kpl and the cipher of the encryption key E(Ks) is 
decrypted by the decrypted work key Kw Moreover, with 
the decrypted encryption key Ks, the cipher of the broad- 
40 casting system of the program source Es(Data) is de- 
crypted. The decrypted program source P.S, is decom- 
pressed by the MPEG decoder 17 and converted to an 
analog signal. The converted analog signal is output to 
a TV set. 

45 [0059] When a user desires to download the software 
information PS 2 to the digital storage 41 (in this case, 
the above-mentioned switching means switches each 
time information is sent to the digital storage 41), the 
user inserts the smart card 19 into the terminal 40 and 
so inputs a registered ID number of broadcasting system, 
ID1 . Therefore, the CPU 42 performs an inquiry of reg- 
istration to the authorization center 22 through the mo- 
dem 43. If the registration of that user is confirmed, a 
program source Es (Em(Data)} over which a cipher of 
55 the broadcasting system and a cipher of the software 
system were put is sent from the broadcastinq station 
30. 

[0060] That is, in the encryption processing section 37 
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of the broadcasting station 30, a cipher of the storage 
system is put over the software information P£>2 by 
means of an encryption key Km for software information 
use. Also, this encryption key Km is encrypted with a 
personal key Kp2for software inlormation use, given to 
each user. The encrypted software data Em(Data) is 
sent to the encryption processing section 5, and the en- 
crypted encryption key E(Km) is sent to the authoriza- 
tion center 44. 

[0061] Inthe encryption processing section 5, acipher 
of the broadcasting system is put over the software data 
Em(Data) over which a cipher of the software system 
was put, by means of the encryption key Ks. As de- 
scribed above, this encryption key Ks is encrypted with 
the work key Kw, and the work key Kw is encrypted with 
the personal key Kpl. The encryption processing section 
5. multiplexes the software data Es{Em(Data)} over 
which the cipher of the software system and the cipher 
of the broadcasting system were put in duplicate, and 
the encryption key E(Ks) and the work key E(Kw), and 
transmits the multiplexed data to the terminal 40. 
[0062] In the terminal 40, the cipher of the broadcast- 
ing system of the doubly encrypted software data Es{Em 
(Data)} as described above is decrypted because the 
smart card 19 has been inserted in the terminal 40. The 
software data Em(Data) where the cipher of the broad- 
casting system was decrypted is recorded on the digital 
storage 41. 

[0063] When a user sees the software data Em(Data) 
recorded on the digital storage 41, the user inserts the 
smart card 1 9 into the terminal 40 and inputs a regis- 
tered ID number of software system, ID2. Thereby, the 
CPU 42 performs an inquiry of registration to the author- 
ization center 44 through the modem 43. If the registra- 
tion of the user is confirmed, bill processing is per- 
formed. Then, the encryption key E(Km) is input from 
the authorization center 44 through, for example, a tel- 
ephone line and through the modem 43 to a smart card 
91 , and the cipher of the encryption key E(Km) is de- 
crypted. 

[0064] That is, the smart card 91 includes the person- 
al key Kp2 which was used whenencrypting the encryp- 
tion key Km of software system. Therefore, the cipher 
of the encryption key E(Km) is decrypted by the personal 
key,Kp2. The decrypted encryption key Km is sent 
through the CPU 42 to the decryption section 46. 
[0065] In the decrypting section 46, the cipher of the 
software system, put over the software data Em (data), 
is decrypted by the encryption key Km, and the decrypt- 
ed software data is sent to an MPEG decoder 17. In the 
MPEG decoder 1.7, the decrypted software data P^ is 
decompressed and then converted to an analog signal. 
The analog signal is then output to a TV set. 
[0066] In the foregoing structure, when the software 
information PSg is transmitted to the digital signal re- 
ceiving apparatus 40, a cipher of the software system is 
put over the software information PS 2 and then a cipher 
of the broadcasting system is put over and transmitted, 



and at the same time the encryption key Km, which was 
used when the cipher of the software system is put over, 
is encrypted with the personal key Kp2. 
[0067] In the digital signal receiving apparatus 40, the 

5 cipher of the broadcasting system of the software data 
Es{Em(Data)} is decrypted with the smart card 19 and 
then the decrypted software data is recorded on the dig- 
ital storage 41. When the software data Em(Data), re- 
corded on the digital storage 41 , is seen, the cipher of 

10 the encryption key E(Km) is decrypted with the smart 
card 91 . Also, the cipher of the software system, put over 
the software data Em(Data), is decrypted with the de- 
crypted encryption key Km. 

[0068] According to the foregoing structure, when 
is transmitting the software information PS 2 is transmitted 
to the digital signal receiving apparatus 40, a cipher of 
the software system and a cipher of the broadcasting 
system are put over the software information PS 2 , and 
the encryption key Km, used when the cipher of the soft- 
20 ware system is put over, is encrypted with the personal 
key Kp2. Therefore, the security of the software infor- 
mation PS 2 can be ensured more firmly. 
[0069] Also, according to the above-mentioned struc- 
ture, by incorporating the personal key Kp2 for decrypt- 
25 jng the cipher of the encrypted encryption key E(Km) 
into the smart card 91 , desired software information PS 2 
can be seen at a desired time because users are able 
to decrypt with ease and reliability the cipher of the en- 
cryption key E( Km). 

30 

(5) Other Embodiment 

[0070] The above-mentioned embodiments have 
been dealt with the case where a contract user has 

35 downloaded tree-charged software information PS 2 to 
the storage 41 and where the user sees the software 
information PS 2 recorded on the digital storage 41 when 
the user desires to do so. However, the present inven- 
tion is not limited to this, but as shown in Fig. 1 1 , a pack- 

40 age system 1 00 can be constructed with a software sup- 
ply section 32 and a digital signal receiving apparatus 
40, software information encrypted in the software sup- 
ply section 32 is recorded on a recording medium and 
packaged, and this package software 101 can be sent 

45 to users periodically, for example, by the month. 

[0071] In this case, as shown in Fig. 1 1 , a billing sys- 
tem can be constructed only with the digital signal re- 
ceiving apparatus 40. Also, by cheaply providing users 
with the software package 101 where a plurality of piec- 

so es of encrypted software information are recorded, there 
can be constructed a new software information supply 
system where pieces of software information are pack- 
aged, such as a system where only information that us- 
ers desire to see is billed and enjoyed. Note that the 

ss package software 101 includes, for example, ten mov- 
ies. 

[0072] Further, the above-mentioned embodiments 
have been dealt with the case where the authorization 
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center 22 for a broadcasting system and the authoriza- 
tion center 44 for a software system are provided and 
the share of the modem 43 is controlled by means of the 
CPU 42, so that two independent billing systems are 
constructed. However, the present invention is not lim- 
ited to this, but the bill processing with respect to the 
programs of the broadcasting and software systems can 
be performed with a single authorization center. 
[0073] Further, the above-mentioned embodiment 
have been dealt with the case that there was used the 
digital signal receiving apparatus 40 where the record- 
ing/reproducing section 61 is connected to the receiving 
section 60. However the present invention is not limited 
to this, but it can use a digital signal receiving apparatus 
40 into which the recording/reproducing section 61 is in- 
corporated. 

[0074] Further, the above-mentioned embodiment 
have been dealt with the case where variable-speed re- 
production processing was performed in the software 
supply section 32. However, the present invention is not 
limited to this, but the variable-speed reproduction 
processing can be performed in the terminal, i.e., digital 
signal receiving apparatus 40. 

[0075] Furthermore, the above-mentioned embodi- 
ment have been dealt with the case where the smart 
card 1 9 for seeing a general contract program source 
PSt and the smart card 91 for seeing software informa- 
tion PS 2 were individually provided. However, the 
present invention is not limited to this, but a single card 
can have both of the functions of the smart card 1 9 and 
the smart card 91. 

[0076] Moreover, the above-mentioned embodiment 
have been dealt with the case where the software infor- 
mation PS 2 was downloaded to the digital storage 41. 
However, the present invention is not limited to this but 
the software information PS 2 can be seen at real time. 
In such a case, the switching means is switched to the 
path leading to the packet separation section 1 6 and the 
smart cards 1 9 and 91 are inserted into the terminal 40 
Therefore, the ciphers of broadcasting and software 
systems which have been put over the software infor- 
mation PS 2 are decrypted, and the software information 
PS 2 can be seen at real time. 

[0077] Finally, the above-mentioned embodiment 
have been dealt with the case where an audio signal 
and an video signal are band-compression encoded and 
then transmitted to the digital signal receiving apparatus 
40. However, the present invention is not limited to this 
but only the video signal can be band-compression en- 
coded and transmitted to the digital signal receiving ap- 
paratus 40. 

[0078] While there has been described in connection 
with the preferred embodiments of the invention, it will 
be obvious to those skilled in the art that various chang- 
es and modifications may be aimed, therefore, to cover 
in the appended claims all such changes and modifica- 
tions as fall within the true scope of the invention. 
[0079] Accordingly, it will be appreciated that an as- 



pect of the present invention includes a digital signal 
transmitting method where at least a band-compression 
coded digital video signal may be given encryption 
processing and transmitted, wherein 
5 when an image providing predetermined services 

is transmitted, said band-compression coded digital sig- 
nal maybe given first-encryption processing and then 
the first-encryption processed digital signal may be fur- 
ther given said encryption processing and transmitted. 
w [0080] The band-compression coded and first-en- 
cryption processed digital signal may be mixed with a 
digital signal where said band-compression encoding 
may have been completed with a predetermined image 
unit, and the mixed signal may be given said encryption 
processing and transmitted. 

[0081] A first encryption key, which is used when giv- 
ing said first-encryption processing to said band-com- 
pression coded signal, may be encrypted with a second 
encryption key. 

20 [0082] According to a further aspect of the invention, 
at least a band-compression coded digital video signal 
may be given encryption processing and transmitted, 
wherein 

said band-compression coded and encryption 
2S processed digital signal may be mixed with a digital sig- 
nal where said band-compression encoding may have 
been completed within a predetermined image unit to 
be transmitted. 

[0083] It will be appreciated that a further aspect of 
30 the invention may provide a digital signal receiving ap- 
paratus for receiving at least a band-compression coded 
digital video signal over which a first cipher may be put 
and then a second cipher may be put and which may be 
transmitted by a broadcasting station, comprising: 

35 

second-decryption means for decrypting said sec- 
ond cipher put over said digital signal; 
recording/reproducing means for recording said 
digital signal, where said second cipher was de- 
40 crypted, on a recording medium, and also for repro- 
ducing said digital signal recorded on said recording 
medium; and 1 ■ 

first-decryption means for decrypting said first ci- 
pher of a reproduction signal that is reproduced 
45 from said recording medium. 



[0084] The first decrypting means may include key 
decryption means decrypting a cipher put over an en- 
cryption key which may be used when putting said first 
so cipher over said band-compression digital signal, and 
wherein 

a cipher, put over said encryption key, may be de- 
crypted by said decryption means, and the first cipher 
of said reproduction signal may be decrypted with the 
5S decrypted encryption key. 

[0085] The broadcasting station may mix said band- 
compression coded digital signal where the first cipher 
was put over and a digital signal where the band-com- 
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pression encoding has been completed within a prede- 
termined image unit, then put a second cipher over the 
mixed signal, and may transmit it; and 

said recording/reproducing means may record 
said digital signal over which the first cipher was put and 
also records said digital signal where the band-com- 
pression encoding may have been completed at a pre- 
determined image unit, and at the time of variable-speed 
reproduction, may output a variable-speed reproduction 
image by means of said digital signal where the band- 
compression encoding has been completed at a prede- 
termined image unit. 

[0086] According to a further aspect, embodiments of 
the invention may provide a digital signal receiving ap- 
paratus which may have a modem and, by controlling, 
by means of said modem, switching of an access to a 
plurality of management stations managing billing infor- 
mation, constructs a billing system, of said plurality of 
management stations. According to a further aspect, 
embodiments of the invention may provide a recording 
medium wherein at least a band-compression coded 
digital video signal may have been encrypted and re- 
corded. 



Claims 

1 . A method of transmitting a digital signal, the method 
comprising the steps of : 

compressing (33, 2) a first digital signal (PS2) 
and a second digital signal (PS1 ); 
encrypting (37) said compressed first digital 
signal with a first encryption key (Km); 
multiplexing (4) the encrypted compressed first 
digital signal and compressed second digital 
signal; 

encrypting (5) the multiplexed first and second 
digital signals with a second encryption key 
(Ks); 

receiving (44) an inquiry to reproduce said first 
digital signal stored on a recording medium of 
a receiver (40, 60, 61 ); 

confirming (44, 45) registration of a subscriber 
who owns said receiver in response to said in- 
quiry; 

performing (45) a biHing processing if said reg- 
istration is confirmed; 
and 

transmitting (44) said first encryption key (Km) 
to said receiver (40, 60, 61) after said billing 
processing is performed. 

2. A method according to Claim 1 , further comprising: 

encrypting (30) said second encryption key 
(Ks); 

wherein said multiplexing step multiplexes said 



first digital signal, second digital signal and said 
encrypted second encryption key (E(Ks)). 

3. A method according to Claim 1 , further comprising: 

5 

encrypting (30) said first encryption key (Km); 
wherein said transmitting step transmits said 
encrypted first encryption key (E(Km)) to said 
receiver (40, 60, 61). 

10 

4. A method according to Claim 1 , wherein said receiv- 
ing step receives said inquiry via telephone line. 

5. A method according to Claim 4, wherein said trans- 
it mitting step transmits said encryption key (Km) via 

telephone line. 

6. A method according to any of claims 1 to 5, wherein 
each respective first and second digital signal de- 

20 fines an image. 

7. Apparatus (30) for transmitting a digital signal, the 
apparatus comprising: 

2S means (33, 2) for compressing a first digital sig- 

nal (PS2) and a second digital signal (PS1 ); 
means (37) for encrypting said compressed 
first digital signal with a first encryption key 
(Km); 

30 means (4) for multiplexing the encrypted com- 

pressed first digital signal and compressed sec- 
ond digital signal; 

means (5) for encrypting the multiplexed first 
and second digital signals with a second en- 

35 cryption key (Ks); 

means (44) for receiving an inquiry to repro- 
duce said first digital signal stored on a record- 
ing medium of a receiver (40, 60, 61); 
means (44 : 45) for confirming registration of a 

40 subscriber who owns said receiver in response 

to said inquiry; 

means (45) for performing a billing processing 
if said registration is confirmed; and 
means (44) for transmitting said first encryption 
45 key (Km) to said receiver (40, 60, 61 ) after said 

billing processing is performed. 

8. Apparatus according to Claim 7, further comprising: 

so means (30) for encrypting said second encryp- 

tion key (Ks); 

wherein said- multiplexing means multiplexes 
said first digital signal, second digital signal and 
said encryption key (E(Ks)). 

55 

9. Apparatus according to Claim 7, further comprising: 

means (30) for encrypting said first encryption 
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key (Km); 

wherein said transmitting means transmits said 
encrypted first encryption key (E(Krn)) to said 
receiver (40, 60, 61). 

10. Apparatus according to Claim 7, wherein said re- 
ceiving means receives said inquiry via telephone 
line. 



Apparatus according to Claim 10, wherein said w 
transmitting means transmits said first encryption 
key (Km) via telephone line. 

!. Apparatus according to any of claims 7 to 1 1 , where- 
in each respective first and second digital signal de- is 
fines an image. 
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(54) Digital signal transmitting methods, digital signal receiving apparatus, and recording media 



(57) A digital signal transmitting method, a digital 
signal receiving apparatus (40), and a recording medi- 
um (101) ensure the security of fee-charged software 
information. When an image providing predetermined 
services is transmitted, a band-compression coded dig- 



ital video signal is subjected to first-encryption process- 
ing and then the digital signal is subjected to further en- 
cryption processing and transmitted. Therefore, double 
security can be added to the video signal and a digital 
signal transmitting method of more firmly ensured secu- 
rity can be realized. 
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